fix: dedicated upload_code_scanning_sarif job with SARIF artifact transfer, direct checkout token computation, and github-app checkout support#24322

Merged

pelikhan merged 15 commits intomainfrom

copilot/add-sarif-upload-git-commit-references

Apr 3, 2026

Commits on Apr 3, 2026

Initial plan
Copilot
authored
fix: add git checkout and ref/sha inputs to SARIF upload step

Copilot
and
pelikhan
authored
fix: use actions/checkout with checkout manager token for SARIF restore

Copilot
and
pelikhan
authored
chore: initial plan for code scanning job separation

Copilot
and
pelikhan
authored
feat: move SARIF upload into dedicated upload_code_scanning_sarif job

Copilot
and
pelikhan
authored
Merge remote-tracking branch 'origin/main' into copilot/add-sarif-upload-git-commit-references
Copilot
authored
feat: merge main and use checkout_token from safe_outputs job outputs

Copilot
and
pelikhan
authored
feat: upload SARIF as artifact in safe_outputs and download in upload job; add smoke-claude test

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/add-sarif-upload-git-commit-references
pelikhan
authored
fix: change smoke-claude push-to-pr allowed-files to non-protected smoke-test-files folder

Copilot
and
pelikhan
authored
fix: compute checkout token directly in upload job instead of passing through safe_outputs outputs

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/add-sarif-upload-git-commit-references
pelikhan
authored
Merge branch 'main' into copilot/add-sarif-upload-git-commit-references
pelikhan
authored
fix: support github-app checkout token minting in upload job and fix tests

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/add-sarif-upload-git-commit-references
pelikhan
authored